# cve.now: QT

The newest entries naming QT as an affected vendor (up to 200), of 48 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116337](https://cve.now/CVE-2026-116337.md): Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt Framework (CVSS 0.6)
- [CVE-2026-114366](https://cve.now/CVE-2026-114366.md): Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework (CVSS 2.3)
- [CVE-2026-107479](https://cve.now/CVE-2026-107479.md): Integer truncation vulnerability in QTextCodec conversion functions impacts Qt Framework (CVSS 1.7)
- [CVE-2026-110944](https://cve.now/CVE-2026-110944.md): Resource exhaustion vulnerability in HTTP request handling impacts Qt HTTP Server (QHttpServer) (CVSS 2.7)
- [CVE-2026-103653](https://cve.now/CVE-2026-103653.md): Out-of-bounds read vulnerability in CoAP message parsing impacts Qt CoAP (CVSS 6.7)
- [CVE-2026-100140](https://cve.now/CVE-2026-100140.md): Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt (CVSS 1.9)
- [CVE-2026-107457](https://cve.now/CVE-2026-107457.md): Memory corruption vulnerability in QMqttClient impacts Qt MQTT (CVSS 2.3)
- [CVE-2026-111487](https://cve.now/CVE-2026-111487.md): Out-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework (CVSS 4.3)
- [CVE-2026-105924](https://cve.now/CVE-2026-105924.md): NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt (CVSS 4.3)
- [CVE-2026-107590](https://cve.now/CVE-2026-107590.md): Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt (CVSS 1.9)
- [CVE-2026-107472](https://cve.now/CVE-2026-107472.md): Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt (CVSS 4.3)
- [CVE-2026-105946](https://cve.now/CVE-2026-105946.md): Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt (CVSS 5.3)
- [CVE-2026-107157](https://cve.now/CVE-2026-107157.md): Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework (CVSS 2.0)
- [CVE-2026-96432](https://cve.now/CVE-2026-96432.md): Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt (CVSS 2.1)
- [CVE-2026-95620](https://cve.now/CVE-2026-95620.md): Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt (CVSS 2.1)
- [CVE-2026-16762](https://cve.now/CVE-2026-16762.md): Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt (CVSS 8.7)
- [CVE-2026-105923](https://cve.now/CVE-2026-105923.md): Null-pointer dereference in QTriangulator reachable through VectorImage (CVSS 4.0)
- [CVE-2026-101201](https://cve.now/CVE-2026-101201.md): QBinaryJson::fromBinaryData() integer overflow leading to OOB read (CVSS 4.3)
- [CVE-2026-8168](https://cve.now/CVE-2026-8168.md): Denial-of-service vulnerability in the SVG parser and renderer impacts Qt (CVSS 7.1)
- [CVE-2026-94370](https://cve.now/CVE-2026-94370.md): Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs (CVSS 6.5)
- [CVE-2026-19395](https://cve.now/CVE-2026-19395.md): An empty \<img\> attribute value in styled text triggers a parser error that halts the device. (CVSS 6.6)
- [CVE-2026-95509](https://cve.now/CVE-2026-95509.md): Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs (CVSS 8.8)
- [CVE-2026-79680](https://cve.now/CVE-2026-79680.md): Authentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module (CVSS 4.5)
- [CVE-2026-78253](https://cve.now/CVE-2026-78253.md): Denial-of-service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText() impacts Qt (CVSS 2.3)
- [CVE-2026-79616](https://cve.now/CVE-2026-79616.md): Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick (CVSS 0.6)
- [CVE-2026-76151](https://cve.now/CVE-2026-76151.md): Out-of-bounds read (buffer over-read) vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework (QtNetwork module) (CVSS 4.6)
- [CVE-2026-19248](https://cve.now/CVE-2026-19248.md): Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt (CVSS 7.1)
- [CVE-2026-13326](https://cve.now/CVE-2026-13326.md): Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module (CVSS 6.9)
- [CVE-2026-11573](https://cve.now/CVE-2026-11573.md): Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml) (CVSS 7.1)
- [CVE-2026-15037](https://cve.now/CVE-2026-15037.md): XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization (CVSS 2.9)
- [CVE-2026-9499](https://cve.now/CVE-2026-9499.md): Out-of-bounds read in QTextCodec::codecForName() in Qt (CVSS 6.3)
- [CVE-2026-12379](https://cve.now/CVE-2026-12379.md): URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion (CVSS 6.8)
- [CVE-2026-12593](https://cve.now/CVE-2026-12593.md): Privilege escalation via forged API token creation in Axivion Dashboard OIDC/OAuth2/SSO subsystem (CVSS 8.7)
- [CVE-2025-14575](https://cve.now/CVE-2025-14575.md): Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading (CVSS 1.8)
- [CVE-2026-6210](https://cve.now/CVE-2026-6210.md): Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash (CVSS 8.7)
- [CVE-2025-14576](https://cve.now/CVE-2025-14576.md): Possible QML code injection in VectorImage component (CVSS 7.4)
- [CVE-2025-12385](https://cve.now/CVE-2025-12385.md): Improper validation of \<img\> tag size in Text component parser (CVSS 8.7)
- [CVE-2025-23050](https://cve.now/CVE-2025-23050.md): QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (or division by zero). (CVSS 3.1)
- [CVE-2025-6338](https://cve.now/CVE-2025-6338.md): Possible denial of service with multiple incoming connections to a Schannel based server with a TLS backend (CVSS 9.2)
- [CVE-2025-10729](https://cve.now/CVE-2025-10729.md): Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG (CVSS 9.4)
- [CVE-2025-10728](https://cve.now/CVE-2025-10728.md): Uncontrolled recursion in Qt SVG module (CVSS 9.4)
- [CVE-2025-5992](https://cve.now/CVE-2025-5992.md): Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service (CVSS 2.3)
- [CVE-2025-5991](https://cve.now/CVE-2025-5991.md): Use after free in QHttp2ProtocolHandler (CVSS 2.1)
- [CVE-2025-5683](https://cve.now/CVE-2025-5683.md): When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash. (CVSS 5.1)
- [CVE-2025-5455](https://cve.now/CVE-2025-5455.md): Possible denial of service when passing malformed data in a URL to qDecodeDataUrl (CVSS 8.4)
- [CVE-2025-4211](https://cve.now/CVE-2025-4211.md): Improper Link Resolution Before File Access in QFileSystemEngine on Windows (CVSS 7.3)
- [CVE-2025-3512](https://cve.now/CVE-2025-3512.md): Buffer overflow in QTextMarkdownImporter (CVSS 4.8)
- [CVE-2025-30348](https://cve.now/CVE-2025-30348.md): encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with re (CVSS 5.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/qt
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.